$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa File: 0659de0f-1c21-473e-9c33-b34da5f20385.roa (raw, json) Hash identifier: JSOUkg2F8F/gY9jxu/s7Kp7wyQdvV9BN1g8A4/QY2hI= Subject key identifier: 19:96:1C:16:FF:92:FB:47:FE:9F:C5:D3:04:1D:17:9C:5D:58:DA:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C8FA741A03870DCD38BF0EC32B917389AEF3A45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa Signing time: Wed 21 Oct 2026 00:51:08 +0000 ROA not before: Wed 21 Oct 2026 00:51:08 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8f:a7:41:a0:38:70:dc:d3:8b:f0:ec:32:b9:17:38:9a:ef:3a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:51:08 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=642bc7cdf107e64fab01a6891fb187bcbfa465646c55f73dcb4a8309255e0919, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:3a:1b:c3:ef:e5:e8:8e:39:39:3a:1b:e5: 8d:b4:54:d5:71:60:28:0b:08:1b:c9:91:1d:b6:da: 51:d8:51:fb:ff:b5:5f:ea:f9:de:9e:44:1c:ff:0a: 47:45:4a:1e:0b:bd:a4:30:bc:af:20:57:23:66:19: 87:24:d1:a8:66:f8:5e:aa:ba:41:eb:89:45:25:cd: 66:09:14:fd:e8:8a:32:e8:29:e1:e1:45:a7:05:70: 64:ff:bc:f7:1b:92:31:64:4e:cf:b3:95:ef:d8:ad: 4e:70:b8:11:0c:82:75:ae:42:83:f5:70:ef:da:6e: c5:7d:14:ea:95:4b:3b:83:d5:b0:54:ed:54:c7:e2: bc:4d:c0:09:ee:f4:3e:b1:8a:13:b7:95:24:7e:a8: 1a:3a:33:2c:fb:5a:50:47:42:2a:d2:74:62:35:07: 2e:e3:b5:f7:e6:be:aa:35:7f:5c:6c:e7:1e:00:5a: 16:b7:81:1e:bf:5a:5b:83:1c:60:3f:ef:bc:01:1c: dc:bc:c5:b3:b2:c1:5d:c4:1b:a0:97:64:0a:08:21: 34:c6:11:4f:5c:b5:32:4f:93:da:41:da:e8:e8:70: a3:ba:58:59:c8:66:01:42:d0:27:d2:39:5b:3c:60: 23:ed:ff:f7:da:ad:8a:4b:30:84:8d:a0:35:db:0f: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:1C:16:FF:92:FB:47:FE:9F:C5:D3:04:1D:17:9C:5D:58:DA:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.76.0/24 Signature Algorithm: sha256WithRSAEncryption 24:cb:bd:e8:a9:37:a2:de:7f:ca:14:2b:2e:d9:e5:72:92:2d: 46:41:3f:e9:b7:7d:d4:48:ad:70:06:cb:ea:01:ed:f2:0d:71: ca:2b:4a:c0:79:88:38:b0:54:2c:e0:90:21:d1:03:c2:4a:62: 14:e5:38:e4:45:20:39:fe:cb:ed:d7:b3:7c:e7:4f:2c:20:68: e8:4f:77:d3:c4:5e:94:fd:31:1a:51:b8:8e:96:88:2e:cf:f3: 52:1a:12:9f:cd:a4:9b:53:93:a3:bc:21:04:81:a6:67:20:3a: 06:27:8c:c1:75:31:c2:c8:cb:31:2c:24:d5:18:f7:42:9e:96: 9d:9f:d8:b0:19:9c:0c:50:e0:e5:b7:79:0c:0c:50:36:5c:6e: d9:d2:c1:50:29:43:19:6d:8a:20:c4:18:8f:5c:03:17:fd:3f: ca:db:12:75:4b:eb:47:00:b2:93:4a:7f:42:86:27:14:16:c1: 4f:c0:ca:d4:71:82:d1:9e:8e:7b:f9:5a:42:92:48:90:bb:45: 50:8e:d3:28:0c:2c:bb:c7:ad:76:8c:af:78:d0:fa:fa:53:b2: 8a:bf:7d:c7:c0:6d:96:02:fa:45:04:7b:db:08:30:95:b4:6a: bf:29:61:ad:2d:3f:23:bf:05:d5:51:76:07:7d:f6:05:95:0a: 96:40:b4:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPI+nQaA4cNzTi/DsMrkXOJrvOkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDA1MTA4WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDJiYzdjZGYxMDdlNjRmYWIwMWE2ODkxZmIxODdiY2Jm YTQ2NTY0NmM1NWY3M2RjYjRhODMwOTI1NWUwOTE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8kjobw+/l6I45OTob5Y20VNVxYCgLCBvJkR222lHYUfv/ tV/q+d6eRBz/CkdFSh4LvaQwvK8gVyNmGYck0ahm+F6qukHriUUlzWYJFP3oijLo KeHhRacFcGT/vPcbkjFkTs+zle/YrU5wuBEMgnWuQoP1cO/absV9FOqVSzuD1bBU 7VTH4rxNwAnu9D6xihO3lSR+qBo6Myz7WlBHQirSdGI1By7jtffmvqo1f1xs5x4A Wha3gR6/WluDHGA/77wBHNy8xbOywV3EG6CXZAoIITTGEU9ctTJPk9pB2ujocKO6 WFnIZgFC0CfSOVs8YCPt//farYpLMISNoDXbDwKHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGZYcFv+S+0f+n8XTBB0XnF1Y2gcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NTlkZTBmLTFjMjEtNDczZS05YzMzLWIzNGRhNWYyMDM4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnkwwDQYJKoZIhvcNAQELBQADggEBACTLveipN6Lef8oUKy7Z5XKSLUZB P+m3fdRIrXAGy+oB7fINccorSsB5iDiwVCzgkCHRA8JKYhTlOORFIDn+y+3Xs3zn TywgaOhPd9PEXpT9MRpRuI6WiC7P81IaEp/NpJtTk6O8IQSBpmcgOgYnjMF1McLI yzEsJNUY90Kelp2f2LAZnAxQ4OW3eQwMUDZcbtnSwVApQxltiiDEGI9cAxf9P8rb EnVL60cAspNKf0KGJxQWwU/AytRxgtGejnv5WkKSSJC7RVCO0ygMLLvHrXaMr3jQ +vpTsoq/fcfAbZYC+kUEe9sIMJW0ar8pYa0tPyO/BdVRdgd99gWVCpZAtIQ= -----END CERTIFICATE-----Generated at Sun Nov 8 00:54:46 2026 by rpki-client